General

  • Target

    0d6e8522651a07c5b58e1abafb454b35ee08238a9a7512e50e37e72c1b17dfbd.elf

  • Size

    36KB

  • Sample

    241228-cgxp9stqdj

  • MD5

    d247ab84c9c090053b129afa0e59bfff

  • SHA1

    0710e52bdb6ee2c8c4d0d1f88b402f1584d7d3cc

  • SHA256

    0d6e8522651a07c5b58e1abafb454b35ee08238a9a7512e50e37e72c1b17dfbd

  • SHA512

    994e66ff08246807783f8ca10df97ebef03fa05aa1ef3eac7f08f285b1057d5e2bb6c5159f6731380a3014e7d2e4a2596e0a9f6cbd1a1f147ae23123adc77520

  • SSDEEP

    768:8+4qtvWUAASje6lhaVG5CHb4diYjLMWf5CcWHdbL5fPr8X2qiWx07:n9tvWrASje4wVGigJmFL578moa

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      0d6e8522651a07c5b58e1abafb454b35ee08238a9a7512e50e37e72c1b17dfbd.elf

    • Size

      36KB

    • MD5

      d247ab84c9c090053b129afa0e59bfff

    • SHA1

      0710e52bdb6ee2c8c4d0d1f88b402f1584d7d3cc

    • SHA256

      0d6e8522651a07c5b58e1abafb454b35ee08238a9a7512e50e37e72c1b17dfbd

    • SHA512

      994e66ff08246807783f8ca10df97ebef03fa05aa1ef3eac7f08f285b1057d5e2bb6c5159f6731380a3014e7d2e4a2596e0a9f6cbd1a1f147ae23123adc77520

    • SSDEEP

      768:8+4qtvWUAASje6lhaVG5CHb4diYjLMWf5CcWHdbL5fPr8X2qiWx07:n9tvWrASje4wVGigJmFL578moa

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks